CVE-2021-42373 vulnerability in Busybox and Other Products
Published on November 15, 2021
A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2021-42373
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-42373 are published in these products:
Affected Versions
busybox:- Version unspecified and below 1.34.0 is affected.
Exploit Probability
EPSS
0.08%
Percentile
24.07%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.